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a. The outstanding Office Action sent electronically (Notification Date) on February 
20, 2007, Is hereby vacated, Including the period for reply set forth therein. The 
following is an Office action on the nnerits. 

DETAILED ACTION 

1 . The abstract of the disclosure is objected to because 'is' missing in line 14 at the 
beginning. Correction is required. See MPEP § 608.01(b) 

Claim Rejections - 35 USC §112 

2. The following is a quotation of the second paragraph of 35 U.S.C. 1 1 2: 

The specification si^ail conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter, which the applicant regards as his invention. 

3. Claim 1 1 is rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. Claim 1 1 depends on claim 8, 9, and 10; according to MPEP 
chapter 708.02(a)-1(E); the application must not contain any multiple dependent claims. 

Claim Rejections - 35 USC § 101 

4. 35 U.S.C. 101 reads as follows: 



Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 
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5. Claim 4-7, and 8-13 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. 

In claim 8-10 and 12, a "Program for causing a computer to execute" is being recited; 
however, it appears that the program would reasonably be interpreted by one of 
ordinary skill in the art as software that causes access to database, per se. As such, it 
believed that the program of claim 8 and 12 is reasonably interpreted as functional 
descriptive material, software, per se. 

Claim 4-7 and 11 and 13 are rejected because the claims fail to place the invention 
squarely within one statutory class of invention. On page 15, line 26-34 of the instant 
specification, applicant has provided evidence that applicant intends the "medium" to 
include signals, As such, the claim is drawn to a form of energy. Energy is not one of 
the four categories of invention and therefore these claims are not statutory. Energy is 
not a physical article or object and as such is not a machine or manufacture. Energy is 
not a combination of substances and therefor not a composition of matter. 

Claim Rejections - 35 USC § 102 

(e) The invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AlPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
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directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AlPA (pre-AlPA 35 U.S.C. 102(e)). 



6. Claim 1 to 13 are rejected under 35 U.S.C. 102(e) as being anticipated by 

Furumoto et a! (Pub. No.: US 2003/0225766 A1) 

For claim 1 , Furumoto teaches: 

A database access control method (see e.g. [0041]) for performing access control on 
a database in response to a request from a user apparatus through cooperation 
between a database access control apparatus and a proxy process server apparatus, 
wherein: 

The database access control apparatus sends an address of a usable proxy process 
server apparatus to the user apparatus in response to the request from the user 
apparatus (see e.g. [0066] and [0067]). 

The user apparatus connects to the proxy process server apparatus of the address to 
make a database access request. The proxy process server apparatus makes a 
database process request to the database access control apparatus according to the 
database access request from the user apparatus (see e.g. [0021]). 



The database access control apparatus performs a process on the database in 
response to the database process request from the proxy process server apparatus, 
and sends a process result to the proxy process sever apparatus (see e.g. [0014]). 

The proxy process server apparatus performs an additional process on the process 
result sent from the database access control apparatus, and sends an additional 
process result to the user apparatus. 

For claim 2, Furumoto teaches: 

The database access control method as claimed in claim 1 , wherein, 

The database access control apparatus generates an access key based on a user ID 
of the user apparatus, stores the access key in a storing part of the database access 
control apparatus and sends the access key to the user apparatus (see e.g. [0008]). 
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The user apparatus sends the access key to the proxy process server apparatus when 
making the database access request to the proxy process server apparatus (see 
[0010]). 

The proxy process server apparatus sends the access key to the database access 
control apparatus when making the database process request to the database access 
control apparatus (see e.g. [0025]). 

The database access control apparatus determines whether an access key the same 
as the access key received from the proxy process server apparatus exists in the 
storing part, and executes an access to data in the database within a limit permitted for 
the user ID corresponding to the access key only if the access key exists in the storing 
part (see e.g. [0011] and [0012]). 

For claim 3, Furumoto teaches: 

The database access control method as claimed in claim 2, wherein, 

The database access control apparatus determines vyhether the user apparatus is in a 
state of being connected to the proxy process server apparatus in addition to 
performing determination of the access key, and performs the access to the data in the 
database only if the user apparatus is in the state of being connected to the proxy 
process server apparatus (see e.g. [0120]) 

Regarding claim 6, which claim the same subject matter as recited in claim 3. 
Therefore, claim 6 has been analyzed and rejected with respect to claim 3. 

Regarding claim 10, which claim the same subject matter as recited in claim 3. 
Therefore, claim 10 has been analyzed and rejected with respect to claim 3. 



For claim 4, Furumoto teaches: 

A database access control apparatus for performing access control on a database in 
response to a request from a user apparatus through cooperation with a proxy process 
server apparatus, (see e.g. [0042]) comprising: 

Means for instructing the user apparatus to connect to the proxy process server 
apparatus by sending an address of a usable proxy process server apparatus to the 
user apparatus in response to a request from the user apparatus (see e.g. [0066] and 
[0067]) 
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Means for performing a process on the database in response to a database process 
request from the proxy process server apparatus, and sending a process result to the 
proxy process sever apparatus (see e.g. [0014]). 

For claim 5. Furumoto teaches: 

The database access control apparatus as claimed in claim 4. further comprising: 

Means for generating an access key based on a user ID of the user apparatus, storing 
the access key in a storing part of the database access control apparatus and sending 
the access key to the user apparatus when sending the address of the proxy process 
sever apparatus to the user apparatus (see e.g. [0008]) 

Means for receiving the access key and the database process request from the proxy 
process sever apparatus, and determining whether an access key the same as the 
access key received from the proxy process server apparatus exists in the storing part 
(see e.g. [0011]). 

Means for executing an access to data in the database within a limit permitted for the 
user ID corresponding to the access key only if the access key exists in the storing part 
(see e.g. [0012]). 

For claim 7, Furumoto teaches: 

A proxy process server apparatus for accessing a database via a database access 
control apparatus in response to a request from a user apparatus, comprising: 

Means for receiving an access key and a database access request from the user 
apparatus (see e.g. [0033]); 

Means for sending a database process request and the access key to the database 
access control apparatus. Means for receiving a process result of the database 
according to the database process request, performing an additional process on the 
process result, and sending an additional process result to the user apparatus (see e.g. 
[0146] and [0147]). 

Regarding claim 12, which claim the same subject matter as recited in claim 7. 
Therefore, claim 12 has been analyzed and rejected with respect to claim 7. 

For claim 8, Furumoto teaches: 

A program for causing a computer to execute a database access control process for 
performing access control on a database in response to a request from a user 
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apparatus through cooperation with a proxy process server apparatus, the program 
causing the computer to execute (see e.g. [0040]) 

A step for instructing the user apparatus to connect to the proxy process server 
apparatus by sending an address of a usable proxy process server apparatus to the 
user apparatus in response to a request from the user apparatus (see e.g. [0066] and 
[0067]); 

A step for performing a process on the database in response to a database process 
request from the proxy process server apparatus, and sending a process result to the 
proxy process sever apparatus (see e.g. [0014]). 

For claim 9, Fummoto teaches: 

The program as claimed in claim 8, the program causing the computer to execute: 

A step for generating an access key based on a user ID of the user apparatus, storing 
the access key in a storing part of the database access control apparatus and sending 
the access key to the user apparatus when sending the address of the proxy process 
sever apparatus to the user apparatus (see e.g. [0008]). 

A step for receiving the access key and the database process request from the proxy 
process sever apparatus, and determining whether an access key the same as the 
access key received from the proxy process server apparatus exists in the storing part 
(see e.g. [0011]). 

A step for executing an access to data in the database within a limit permitted for the 
user ID corresponding to the access key only if the access key exists in the storing part 
(see e.g. [0012]). 

For claim 1 1 , Fuaimoto teaches: 

A computer readable recording medium recording the program as claimed in any one 
of claims 8-10 (see e.g. [0151] and [0152]) 

Regarding claim 13, which claim the same subject matter as recited in claim 1 1 . 
Therefore, claim 13 has been analyzed and rejected with respect to claim 11. 



The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Calo et al (Pub. No.: US 2005/0071421 A1) teaches a redirection mechanism, which 
directs user towards a proxy process server in the system. 
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Horikiri et al (Patent. No.: US 7,058,971 B1) teaches a safely transfer access privilege 
infomiation, whether a client that makes an object request is authorized. 

Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Andalib F. Lodhi whose telephone number is (571 ) 270- 

1759. The examiner can normally be reached on Monday-Friday, 7:30am- 5:00pm, 

EST Alt Friday off. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Dave Scherbel can be reached on (571 ) 272 4919. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status infomriation for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status infomiation for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1 000. 

AL 

March 12, 2007 




